Critical Infrastructure Security, Critical Infrastructure Security, Network Security

State of security: New York


Who’s in Charge: Board of Elections Co-Director Todd Valentine, Board of Elections Co-Director Robert A. Brehm

It's up to you, New York, New York, who you vote for.

But as far as how you vote in the Empire State, DRE-based electronic voting, including absentee ones, are submitted via paper ballots. The votes are then counted using ballot marker devices/systems or optical scanners. Audits, on the other hand, can potentially be performed electronically.

All election technologies are subjected to testing and reportedly must meet EAC Voluntary Voting System Guidelines.

In its 2017 Annual Report, the NYS Board of Elections reported that it took additional steps to improve cyber posture following the discovery that Russian hackers had intruded into the voter rolls of at least 21 states. “These actions include adding additional layers of protection for public-facing systems and tightening existing security between BOE and the counties,” the report states. Additional protections include training/drill exercises conducted by the state’s Secure Election Center, multiple firewall layers, intrusion detection and prevention, anti-malware, and logging/monitoring.

“The Board put together a plan to address what it believed to be the most important areas to address first and in the longer term,” the annual report states. “That plan was submitted to the Executive and received substantial support.”

And these plans extend into 2019 and beyond. This past July, Governor Andrew Cuomo’s office announced that $5 million in Fiscal 2019 state funds will be applied toward the soliciting of third-party contracts for cybersecurity risk assessments, enhanced intrusion detection devices, and managed security services.

Under the Help America Vote Act, NYS was allocated roughly $19.4 million in federal funds to secure electoral infrastructure in 2018.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.